- You can easily test this, of course -- the problem isn't that you, the user, cannot find out, it's that you pay for being able to use an endpoint in those countries and can't, because they don't exist.
It's not only small countries either, it affects much of Latin America, including Brazil (PIA's servers were in Miami for BR as well last time I checked). I've occasionally seen it also affect US states where e.g. Massachusetts would be served from Trenton, NJ.
- > I am not sure that I really understand what they did.
They checked where the VPN exit nodes are physically located. A lot of them are only setting a country in the whois data for the IP, but do not actually put the exit node in that country.
- "shouldn't be profit oriented" is another way to say "costs will quickly grow exponentially", because there's absolutely no incentive not to let them.
Is anyone better off if elderly care becomes too expensive to offer at scale?
- "yeah, yeah, that's bad, BUT HERE'S SOMETHING ELSE WE SHOULD TALK ABOUT"
Whataboutism doesn't give absolution, it's only meant to deflect, as ks2048 did.
- > But Amazon will fight for its life to stop this
have you seen Amazon's "Rufus"? It's hilariously useless.
- > Imagine for a second that any time you borrowed money to buy something, like a home or a car, you paid that back not by actually paying the loan plus interest, but by a % garnishment of your lifetime wages. That is what equity capital is like.
Weird analogy. It's more like "what if you borrowed money to buy something, didn't have to return it, but if you made money with that thing, you give the lender a cut, forever".
Because the point is: it's not a loan, you don't have to pay it back, and you're not on the hook for it if things go wrong. That's the big upside and why lots of people do that instead of getting a loan. Because loans are available, but people don't want that risk and are willing to give up some of their ownership to avoid it.
- Individually, for you, what's the difference?
You use a service provider, if that service provider is down, your site is down. Does it matter to you that others are also down in that instance?
- Maybe. would be a rare sight, because the anti-israel crowd was primarily celebrating on oct 7th (an invasion), and is silent on russia's invasion of ukraine (because russia is allied with Hamas & Iran). And they trace their grievance back to their failed attempt to drive the jews into the sea, which they call nakba. Far older than e.g. northern cyprus being invaded and occupied (ongoing) by turkey.
- It's not super common, but common enough that I don't want to deal with it.
The other part is just how convenient it is with CF. Easy to configure, plenty of power and cheap compared to the other big ones. If they made their dashboard and permission-system better (no easy way to tell what a token can do last I checked), I'd be even more of a fan.
If Germany's Telekom was forced to peer on DE-CIX, I'd always use CF. Since they aren't and CF doesn't pay for peering, it's a hard choice for Germany but an easy one everywhere else.
- It's not necessarily going through a Russian or Singaporean node though, on the sites I'm responsible for, AWS, GCP, Azure are in the top 5 for attackers. It's just that they don't care _at all_ about that happening.
I don't think you need world-wide law-enforcement, it'll be a big step ahead if you make owners & operators liable. You can limit exposure so nobody gets absolutely ruined, but anyone running wordpress 4.2 and getting their VPS abused for attacks currently has 0 incentive to change anything unless their website goes down. Give them a penalty of a few hundred dollars and suddenly they do. To keep things simple, collect from the hosters, they can then charge their customers, and suddenly they'll be interested in it as well, because they don't want to deal with that.
The criminals are not held liable, and neither are their enablers. There's very little chance anything will change that way.
- It helps separate principled people from others. Some will say "countries must never be invaded, occupied, or annexed", others will add "... if it's done by Israel, but I'll absolutely ignore/support it if it's done by Turkey, Russia, China".
And the latter group is fundamentally not principled, they are biased to the core, and this is an easy way to tell them apart.
It's like people who are against capital punishment vs people who are against capital punishment when it affects them & their friends.
- Consistency. "This must never stand" vs "This must not stand in this particular case only because it negatively affects my group".
- Primarily, it will get you lots of candidates, some of them good.
And between those who are good, some of them will be eager to work, and others are eager to coast by.
Hard to predict in all roles, not just technical ones.
- Has anyone tried to claim that lying on status pages is securities fraud?
100% uptime for Slack in this quarter? I guess that calculation is "not every user tried to connect when we were down, so technically we weren't down for 100% of users, so we really weren't down, just partially unavailable, and so we have 100% uptime".
- This is the same on a lot of larger staffing agencies that promise to have all the people you need and can either do entire projects for you, or get you developers, designers, QA, project managers etc on short notice.
They have a few very competent developers who are primarily in the secondary sales in my experience. First sales contact is between non-technical management and their front-line sales (usually very attractive women). In the second sales contact, technical staff from the potential client is involved and they bring along their real developers. But those are not the ones you'll get on the project. They'll give you interviews with the developers you can get, and they're coached for the interviews and sound fine. But then in reality they are people who can't touch type and develop purely by trial and error without forming a mental model.
If hiring locally wasn't such a mess, nobody would talk to them. At some point even a junior developer is better than not having a developer at all. I assume AI will change that and they'll get replaced first.
- I doubt robots.txt would fit. robots.txt allows or disallows access, but it does not state any claim. You can license content you don't own, put it on your website, and then exclude it in robots.txt without that implying any claims of rights to that content.
- Ad companies, even the small ones, "Brand Protection" companies, IP lawyers looking for images that were used without license, Brand Marketing companies, where it matters also your competitors etc etc
- If they even are AI crawlers. Could be just as well some exploit-scanners that are searching for endpoints they'd try to exploit. That wouldn't require storing the content, only the links.
- "blind" isn't a noun though. "a noun person" is what you mentioned, but "an adjective person" is different. A tall person isn't all about their height, they're just way above average in height. "A person with tallness" would emphasize the height aspect in a strange way.
If you have the power to do something, saying you might do it but that you don't want to makes people imagine you'd do it. If you have a knife and talk about how you "might stab people, but don't want to", that's a very different message than having a knife and saying "obviously I'm not going to stab people, violence is not an option".
The latter reassures, the former depends heavily on what the recipient of the message thinks of you, and whether they can imagine you stabbing people.
If that quote was accurate, then either he just said something and wanted to wing it, or they should reconsider their communication strategists.